Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
File: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft (raw, json)
Hash identifier: lMBGpalrQY7NpNOUo92Ie7k2hqdeJKbllTT5n1oGunY=
Subject key identifier: 32:72:7C:CF:CC:1F:D5:51:6F:3C:96:9B:15:C2:8E:C4:B2:03:66:53
Authority key identifier: D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
Certificate issuer: /CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Certificate serial: 0197B6A1DE9F5DA62481F25B45059B8C8FB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
Manifest number: 098C
Signing time: Sat 28 Jun 2025 13:02:30 +0000
Manifest this update: Sat 28 Jun 2025 13:02:30 +0000
Manifest next update: Sun 29 Jun 2025 13:02:30 +0000
Files and hashes: 1: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl (hash: YqkLB8xv8Nr4/CUBtYQKVKahj4sdXRrBmGVn4iihXcM=)
2: p_TDMyzlQ5zmtlyOFxztvJEw2HQ.roa (hash: fmxxB5F2kwLUu456RKJpssuFKFMbicdIEkOy2yPaKKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:de:9f:5d:a6:24:81:f2:5b:45:05:9b:8c:8f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Validity
Not Before: Jun 28 13:02:30 2025 GMT
Not After : Jun 29 13:02:30 2025 GMT
Subject: CN=32727ccfcc1fd5516f3c969b15c28ec4b2036653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:58:48:08:b1:61:4a:15:9e:ec:a8:f8:4f:4f:
85:2c:8f:a8:b3:46:cd:b4:b6:be:cd:90:c5:94:f9:
96:75:0a:c3:b7:fb:15:d0:5b:8c:9f:d2:66:d9:5c:
8d:b9:2a:3b:4e:93:26:ac:2e:08:ce:fa:30:9b:d4:
ca:af:13:4f:17:71:f9:9f:32:40:f8:2c:cc:d1:48:
34:8b:fc:67:d0:ed:42:54:95:f6:89:11:d0:2c:b2:
5c:c8:a6:0b:74:57:98:03:60:e3:43:81:fe:02:ee:
c7:eb:93:86:96:23:5a:0f:f5:a1:c9:08:34:12:ed:
18:74:ff:12:48:70:86:7a:89:f6:3d:51:d0:a3:8a:
df:d6:1e:f2:42:43:71:9e:56:8f:db:d1:f7:74:9b:
00:71:83:ad:df:38:21:1f:c9:86:01:1b:03:01:54:
92:f2:34:60:83:9b:bd:36:39:48:59:40:e0:9c:69:
cf:51:c0:41:74:3e:ef:02:89:3a:82:2d:66:55:42:
b2:ed:2a:b9:1f:16:91:ee:89:2e:bc:fa:f6:76:bc:
e7:97:57:51:a1:c1:56:f7:7e:b0:8e:99:71:92:7d:
b0:fd:39:d1:16:b0:f4:d5:b5:c8:a9:54:9f:a8:af:
d0:fb:4c:a3:0d:b8:6a:1a:47:8e:b7:24:a0:14:6b:
84:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:72:7C:CF:CC:1F:D5:51:6F:3C:96:9B:15:C2:8E:C4:B2:03:66:53
X509v3 Authority Key Identifier:
keyid:D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:a9:ce:84:fc:66:33:c6:b1:10:fd:a9:b5:f3:16:83:0f:e5:
ad:ba:51:99:2c:1d:65:00:8c:98:a0:60:3b:ed:16:7b:de:bf:
3d:a2:4f:14:65:98:76:63:5c:3a:42:5e:b9:02:73:78:b2:13:
ab:e6:bc:32:1e:cf:b9:77:3a:d8:68:12:f8:5c:42:8f:86:dc:
42:a7:9d:50:36:4c:ac:34:bb:5d:37:7a:36:c6:cd:28:ab:6f:
05:67:51:7b:69:bf:34:66:ee:2e:3b:90:f9:44:37:90:e8:e1:
ef:fd:68:83:0a:bd:72:ca:70:0d:9d:72:9b:38:8a:7b:64:d9:
33:98:bd:9e:79:53:43:6c:66:7b:be:e0:a1:d3:85:75:77:8a:
06:19:23:fe:9e:a8:9f:b9:49:ec:e5:2f:7c:22:eb:41:2b:0f:
52:d9:d0:a5:2b:de:f6:21:45:40:6a:3d:23:d5:17:ec:d1:50:
ed:c5:7f:e4:da:92:b8:d4:b9:ac:62:61:8c:04:0c:73:a6:3f:
9c:d8:f1:7e:79:11:47:dc:20:22:0c:e4:75:df:56:73:e0:94:
b0:6e:e7:1a:3c:d1:ca:ee:50:66:c9:c3:91:e3:97:c1:e5:18:
cf:ca:17:1d:25:99:98:a8:ea:a3:65:8a:f0:51:ce:6e:8a:2d:
2e:78:d3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:59:23 2025 by rpki-client